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Amendments to the Claims 

The listing of claims presented below replaces all prior versions, and listings, 
of claims in the application. 

Listing of claims: 



1, (currently amended) A method for securely encoding and transmitting a message , 
by an originating device of o Gocure H messag e to one of a plurality of recipient 
devices, said message being associated with a partic ular one of a plurality of 
aoDiications running on tlie oricinatinQ device, the method comprising the steps of: 

(a) deterniinlna a device identifier for the originatin g device, and an 
application identifier for each of the plurality of ap pncatlons thereby fonriinq a 
Plurality of device-identifier/appii cation Identifier pairs: 

(b) associating a secret value with each device-identif fer/appiication-ldentifier 

pair: 

{d\ wherein each said secret value is known to t he originating device and to 
one of the rftdpient devices: 

[[(a)]] £dl generating a message value by a first process uoing a , using the 
device identifier, [[an]] a particular application identifier and an application value a 
mnnrnr^f^ wnhiP fiaid a pplication va luB indexing said message: 

[1(b)]] £el combining the message value with one or more first socrot values, 
cciid c c crct vnl u c r be i ng knn^vn qT i hntnm'-^"y "^'V tr> thP n rig i natlno deyico ond ono 
or moro intendod rocipiont doviCQc of the mcQGago, to optablich a Gccrot m o ooag o 
uftUtf ^ ciaid secret value associated with the par ticular application identifier to 
establish a corresponding secret message value; 

[[(c)]] ifl applying the secret message value and the message to an encoding 
process to form a secure message block; and 

I[(d)]] £gl combining on addroso with the device identifier, the application 
identifier the application value and the secure message block, to form a secure 
message for transmission, said secure message being decodable . dependent upon 
the device identifier, the particular appli cation identifier and the application value 
Mi/hich are outside the received secure me ssage block, by the ono or moro of said 
intondo4 recipient dovicoo which device to whic h said secret value associated v/m 
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thfi nartieular apnlination Identifie r is known, said recipient deyisS thereby feeevef 
recovering the message, tt»fr^ddress. the device Identifier, the application 
identifier and the application value. 

2. (currently amended) A method according to claim 1. whereby vtfherein an 
association of the device Identifier, the application identifier, and the application 
value substantially uniquely Identifies the originating device and a purpose of one or 
more of the message and the application, and establishes an identifier for the 
message, eueh sajd message i dontificotion Identifier being bound with the message 
content by virtue of the encoding process. 

3. (currently amended) A method according to claim 1 , whoroby where'" the 
encoding process in step [1(c)]] m comprises one or more of: 

[[(e)]] a symmetric encryption process; 

[1(f)]] an integrity process using one of keyed hash and symmetric encryption 
techniques; 

[[(9)11 a process including both symmetric encryption and keyed integrity; and 
[[(h)]] including the secret message value in a higher level messaging 
protocol. 

4. (currently amended) A method for reception of a securely transmitted message by 
a recipient nc^>n ^.^ recent device bein n one of a olumlitv of recipient devices 
adapted to r^nelve a mes -?? qft from an nriainatinQ device, said message jpeinq 
associated «rith a particular one of a plurality of applications running op ffie 
oriainafana device, the method comprising the steps of: 

(i) extracting one or more of a device identifier, an application identifier and an 
application value from a received secure message having a secure message block, 
said one or mnre of the de^r^- identifier, the aPDlication identifier, and th? application 
value being outside tine s^^^nre messag e block, said aoplication value indexing said 
message : 

G) generating by a first process using the device identifier, the application 
Identifier and the application value a message value; 
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(k) generating, according to a second process using the device identifier and 
the application identifier ono or more socrot value s a secret value known 
Dubctantloiiy only to [[an]] tbe originating device and the eft c or moro intended 
recipient dov i coc of tho mossoge device : 

(!) combining the message value with the oR o - or mor e secret valu e s value, to 
establish a secret message value; 

(m) extracting a secure message block from the received secure message; 

and 

(n) applying the secret message value and the secure message block to a 
decoding process to form the securely transmitted message, this message having 
been securely transmitted by the originating device. 

5-13. (cancelled) 

14. (new) An originating device for securely encoding and transmitting a message to 
one of a plurality of recipient devices, the message being associated with a particular 
one of a plurality of applications running on the originating device, the originating 
device comprising: 

(a) means for determining a device identifier for the originating device, and an 
application identifier for each of the plurality of applications thereby forming a 
plurality of device-identifier/application identifier pairs; 

(b) means for associating a secret value with each device- 
identifier/application-identifier pair; 

(c) wherein each said secret value is known to the originating device and to 
one of the recipient devices; 

(d) means for generating a message value by a first process, using the device 
identifier, a particular said application identifier and an application value said 
application value indexing said message; 

(e) means for combining the message value with a said secret value 
associated with the particular application identifier to establish a corresponding 
secret message value; 

(f) means for applying the secret message value and the message to an 
encoding process to form a secure message block; and 
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(g) means for combining the device identifier the particular application 
identifier the application value and the secure message blocl< to form a secure 
message for transmission, said secure message being decodable, dependent upon 
the device identifier the particular application identifier and the application value 
which are outside the received secure message block, by a said recipient device to 
which said secret value associated with the particular application identifier is known, 
said recipient device thereby recovering the message, the device identifierp the 
particular application identifier and the application value. 

15. (new) Apparatus according to claim 14. wherein the encoding means comprises 

one or more of: 

(e) a symmetric encryption means; 

(f) an integrity processing means using keyed hash or symmetric encryption 
techniques; 

(g) a keyed-symmetric processing means performing symmetric encryption 
and ensuring keyed integrity; and 

(h) encapsulation means for including the secret message value in a higher 
level messaging protocol. 

16. (new) A computer program product according to claim 15, whereby the encoding 
steps in step (f) comprise one or more of: 

symmetric encryption steps; 

integrity processing steps using one of keyed hash and symmetric encryption 
techniques; 

keyed-symmetric steps perfonmlng symmetric encryption and ensuring keyed 
integrity; and 

encapsulation steps for including the secret message value in a higher level 
messaging protocol. 

17. (new) A computer program product including a computer readable medium 
having recorded thereon a computer program for directing an originating device to 
securely encode and transmit a secure message to one of a plurality of recipient 
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devices, said message being associated wl* a particular one of a plurality of 
applications running on the originating device, the program comprising: 

(a) code for determining a device Identifier for the originating device and an 
application identifier for each of the plurality of applications thereby forming a 
plurality of device-ldentlfler/application identifier pairs; 

(b) code for associating a secret value with each device-identifier/application- 
identifier pair; 

(c) wherein each said secret value is known to the originating device and to a 
said one of the recipient devices; 

(d) code for generating a message value by a first process, using the device 
identifier, a particular said application identifier and an application value said 
application value indexing said message; 

(e) code for combining the message value with said secret value associated 
with the particular application identifier to establish a corresponding secret message 
value; 

(f) code for applying the secret message value and the message to an 
encoding process to form a secure message block; and 

(g) code for combining the device identifier the particular application identifier 
the application value and the secure message block to form a secure message for 
transmission, said secure message being decodable, dependent upon the device 
identifier the particular application identifier and the application value which are 
outside the received secure message block, by said recipient device to which said 
secret value associated with the particular application identifier is known, said 
recipient device thereby recovering the message, the device identifier, the particular 
application identifier and the application value. 

18- (new) A recipient device for reception of a securely transmitted message, the 
recipient device being one of a plurality of recipient devices adapted to receive a 
message from an originating device, said message being associated with a particular 
one of a plurality of applications running on the originating device, the recipient 
device comprising: 

(i) means for extracting one or more of a device identifier, an application 
identifier and an application value from a received secure message having a secure 
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message block, said one or more of the device identifier, the application identifier, 
and the application value being outside the secure message block, said application 
value Indexing said message; 

(j) means for generating by a first process using the device identifier, the 
application identifier and the application value a message value; 

(k) means for generating, according to a second process using the device 
identifier and the application identifier a secret value known only to the originating 
device and the recipient device; 

(I) means for combining the message value with ttie secret value, to establish 

a secret message value: 

(m) means for extracting a secure message block from the received secure 

message; and 

(n) means for applying the secret message value and the secure message 
block to a decoding process to form the securely transmitted message, this message 
having been securely transmitted by the originating device. 

19. (new) A computer program product including a computer readable medium 
having recorded tinereon a computer program for directing a recipient device to 
process a received secure message, the recipient device being one of a plurality of 
recipient devices adapted to receive a message from an originating device, said 
message being associated with a particular one of a plurality of applications mnning 
on the originating device, the program comprising: 

(i) code for extracting one or more of a device identifier, an application 
identifier and an application value from a received secure message having a secure 
message block, said one or more of the device identifier, the application identifier, 
and the application value being outside tine secure message block, said application 
value indexing said message; 

G) code for generating by a first process using tiie device identifier, the 
application identifier and the application value a message value; 

(k) code for generating, according to a second process using tiie device 
identifier and the application identifier a secret value known only to the originating 
device and the recipient device; 
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(I) code for combining the message value with the secret value, to establish a 
secret message value; 

(m) code for extracting a secure message block from the received secure 

message; and 

(n) code for applying the secret message value and the secure message 
block to a decoding process to form the securely transmitted message, this message 
having been securely transmitted- by the originating device. 

20. (new) A system providing secure communications, the system comprising an 
originating device and one or more receiving devices, wherein: 

said originating device is adapted for securely encoding and transmitting a 
message to one of a plurality of recipient devices, the message being associated 
with a particular one of a plurality of applications mnning on the originating device, 
the originating device comprising: 

(a) means for determining a device identifier for the originating device, and an 
application identifier for each of tiie plurality of applications thereby fomning a 
plurality of device-identifier/application identifier pairs; 

(b) means for associating a secret value with each device- 
identifier/application-identifier pair; 

(c) wherein each said secret value Is known to the originating device and to 
one of the redpient devices; 

(d) means for generating a message value by a first process, using the device 
identifier, a particular said application identifier and an application value, said 
application value indexing said message; 

(e) means for combining the message value with a secret value associated 
with the particular application Identifier to establish a corresponding secret message 
value; 

(f) means for applying the secret message value and the message to an 
encoding process to form a secure message block; and 

(g) means for combining tiie device identifier, the particular application 
Identifier, tine application value and tine secure message block to form a secure 
message for transmission, said secure message being decodable, dependent upon 
tiie device identifier, the particular application identifier and the application value 
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which are outside the received secure message block, by said recipient device to 
which said secret value associated with the particular apjalication Identifier is known, 
said recipient device thereby recovering the message, the device identifier, the 
particular application identifier and the application value; and wherein; 

said recipient device is adapted for reception of a securely transmitted 
message, the recipient device being one of the plurality of recipient devices adapted 
to receive a message from the originating device, said message being associated 
with a particular one of a plurality of applications running on the originating device, 
the recipient device comprising: 

(h) means for extracting one or more of a device identifier, an application 
Identifier and an application value from a received secure message having a secure 
message block, said one or more of the device identifier, the application identifier, 
and the application value being outside the secure message block; 

(i) means for generating by a first process using the device identifier, the 
application identifier and the application value a message value; 

(j) means for generating, according to a second process using the device 
Identifier and the application identifier a secret value known only to the originating 
device and the recipient device; 

(k) means for combining the message value with the secret value, to establish 

a secret message value; 

(1) means for extracting a secure message block from the received secure 

message; and 

(m) means for applying the secret message value and the secure message 
block to a decoding process to form the securely transmitted message, this message 
having been securely transmitted by the originating device. 

21 . (new) A system according to claim 20; 

wherein said originating device comprises: 
(n) first processing means; 

(o) transmitting means adapted to perform one or more establishing and 
maintaining communications with a receiving means, said first processing means 
being adapted to control said transmitting means, and adapted to support features 
(a) to (g); 
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wherein said receiving device comprises: 
(p) second processing means; and 

(q) the receiving means, being adapted to perform one or more of establishing 
and maintaining communications in conjunction with said transmitting means, said 
second processing means being adapted control said receiving means, and further 
adapted to support features (h) to (m). 

22- (new) A system according to claim 21, wherein said originating device 
comprises one of: 

(r) a PC comprising the transmitting means, a smart card reader, the first 
processing means being responsive to the smart card reader and adapted to control 
said transmitting means, said originating device further comprising a smart card 
adapted to interface with the smart card reader, said smart card having on board 
second processing means which in conjunction with said first processing means are 
adapted to support features (a) to (g); and 

(s) a mobile telephone, comprising the transmitting means, the first 
processing means being adapted to control said transmitting means, and also 
adapted to support features (a) to (g); and 

(t) a set top box, comprising the transmitting means, the first processing 
means being adapted to control said transmitting means, and also adapted to 
support features (a) to (g); and 

(u) a cable modem, comprising the transmitting means, the first processing 
means being adapted to control said transmitting means, and also adapted to 
support features (a) to (g); and 

(V) a personal digital assistant, comprising the transmitting means, the first 
processing means being adapted to control said transmitting means, and also 
adapted to support features (a) to (g). 

23. (new) A method for reception according to claim 4, wherein: 

a plurality of applications are running on the recipient device; and 
the application identifier extracted in the extracting step (I) is used to Identify 
one of the applications mnning on the recipient device, said identified application 
being adapted to process the securely transmitted message decoded in step (n). 
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